Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/f8fe083d-baed-30a1-8518-ee28ce1ef020.roa
File:                     f8fe083d-baed-30a1-8518-ee28ce1ef020.roa (raw, json)
Hash identifier:          nsifhV0w+nhp3vmAktp1sk01dJ22+mZdArQS3H3/U5U=
Subject key identifier:   3A:5D:C5:B4:18:A3:5C:1E:74:DF:A9:7B:98:21:74:8C:22:2A:91:09
Certificate issuer:       /CN=2df6de74-9aed-474d-aed2-ba8ab13a7cf3
Certificate serial:       010D0C9F4328584DEF45E0628D5E6FEB67C61E00
Authority key identifier: 38:76:CF:4E:AE:7D:02:15:BF:04:B7:51:78:C3:1B:2D:9B:FD:BC:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/f8fe083d-baed-30a1-8518-ee28ce1ef020.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     394256
IP address blocks:        2602:f95a::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:45:e0:62:8d:5e:6f:eb:67:c6:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2df6de74-9aed-474d-aed2-ba8ab13a7cf3
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=b5a45a74-4c51-4343-b98d-87ae39f619ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c4:9c:6b:a6:31:24:80:9f:21:3e:96:95:f0:
                    35:55:a8:f7:73:19:ee:92:9c:fc:f6:81:4c:ce:30:
                    e7:aa:7b:b1:b8:dd:e3:d6:d7:6f:86:a0:32:74:4b:
                    6e:36:e2:58:a0:46:ba:f7:b9:1e:ef:03:49:61:f5:
                    15:f3:dd:ef:21:4a:f5:18:f2:3a:1a:b7:63:4f:41:
                    92:0b:2c:9c:95:3e:e9:aa:de:41:42:2c:11:b3:65:
                    17:e1:22:83:5e:15:0c:e0:ca:81:61:ea:d9:db:a7:
                    ff:2a:ed:9c:f6:3e:c3:7f:c5:06:1b:cd:b0:eb:2a:
                    b9:76:49:da:96:1d:53:36:9e:9a:24:c3:66:dc:1d:
                    59:e9:70:20:5d:6c:9f:ae:bd:20:56:fe:02:15:f0:
                    ab:e2:af:e4:3e:74:d1:8c:19:11:fe:a1:9e:06:9d:
                    7a:97:8f:97:ad:79:fc:a1:ec:0f:fa:21:35:11:2a:
                    95:b4:b5:73:60:e9:1b:ac:f5:22:38:0d:5f:a6:a2:
                    bb:75:fe:5d:20:75:9e:ad:40:23:96:1a:58:c9:2a:
                    41:7d:e5:67:62:2d:b3:00:60:46:e8:55:48:ad:fb:
                    3a:9f:24:a9:bf:40:d9:6d:c7:be:c6:6b:30:3c:72:
                    b2:ea:64:e9:48:db:e5:4a:cd:be:cc:bd:7f:8b:69:
                    44:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5D:C5:B4:18:A3:5C:1E:74:DF:A9:7B:98:21:74:8C:22:2A:91:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/f8fe083d-baed-30a1-8518-ee28ce1ef020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.crl

            X509v3 Authority Key Identifier:
                keyid:38:76:CF:4E:AE:7D:02:15:BF:04:B7:51:78:C3:1B:2D:9B:FD:BC:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2df6de74-9aed-474d-aed2-ba8ab13a7cf3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f95a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ef:cc:20:85:8c:9e:b5:f8:ca:a1:67:ba:85:e9:ec:42:9a:
         af:1e:c3:f7:1e:b4:c7:7e:0b:e9:8c:bd:5d:d2:66:bb:07:be:
         2a:34:94:e6:62:63:c9:01:5e:85:a1:0f:f7:95:73:ca:3a:f5:
         91:1f:a6:df:1a:4f:9f:28:53:c9:db:44:05:29:74:ee:f1:e1:
         9b:73:75:b3:0b:b6:70:92:b5:9e:a1:d4:fe:c2:dd:00:01:70:
         a0:42:aa:34:01:8c:25:a3:f3:6a:0f:b0:62:6e:59:5a:a6:b9:
         ec:36:74:a3:5f:cb:b3:cb:90:d2:60:86:8e:7e:e7:28:75:6e:
         66:64:17:f1:ed:37:5e:10:74:ee:4c:62:3c:c5:31:fd:4f:aa:
         d8:07:1c:cf:cd:26:c5:8e:37:46:3d:26:9e:ef:56:bc:1f:a6:
         03:22:ed:28:3b:60:94:0e:39:12:e2:98:c2:51:b2:d3:6b:7d:
         1d:8b:aa:92:18:ca:e2:65:fa:c8:81:78:75:55:78:91:03:1b:
         fd:4c:17:9d:e6:c8:b7:5e:c6:87:18:ce:0e:df:b7:98:e3:ea:
         0c:b0:96:1f:2e:4d:cd:f5:a3:b9:1a:d0:09:30:a7:46:e0:0e:
         e8:47:c9:0a:b8:78:08:f9:34:e6:b0:55:e2:65:60:57:ea:46:
         ea:68:7b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:17:17 2026 by rpki-client